Toni Spets
3581e1b37b
Heisenbridge identd on unprivileged port
Fixes running the container as an unprivileged user.
4 lat temu
sakkiii
897c982517
prometheus security update 2.27.1
4 lat temu
pushytoxin
bee14550ab
Fix local/bin scripts autocompletion by adding rx perms to everyone
It's mildly annoying when trying to execute these scripts while logged
in as a regular user, as the missing execute permissions will hinder
autocompletion even when trying to use with sudo.
These shell scripts don't contain secrets, but may fail when ran by a
regular user. The failure is due to the lack of access to the /matrix
directory, and does not result in any damage.
4 lat temu
Slavi Pantaleev
4880dcceb0
Fix OCSP-stapling-related errors due to missing resolver
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
4 lat temu
Raymond Coetzee
4e2780ff88
Add support for a prometheus postgres exporter
This commit introduces a new role that downloads and installs the
prometheus community postgres exporter https://github.com/prometheus-community/postgres_exporter .
A new credential is added to matrix_postgres_additional_databases that
allows the exporter access to the database to gather statistics.
A new dashboard was added to the grafana role, with some refactoring
to enable the dashboard only if the new role is enabled.
I've included some basic instructions for how to enable the role in
the Docs section.
In terms of testing, I've tested enabling the role, and disabling
it to make sure it cleans up the container and systemd role.
4 lat temu
Jez Cope
a8dbd93f61
Check irc service is present before stopping it
4 lat temu
Thom Wiggers
af4bd50c2a
Update IRC appservice
4 lat temu
Slavi Pantaleev
d61fe94bae
Fix incorrect path in Mjolnir uninstallation tasks
4 lat temu
rakshazi
4ddd8bbb84
Updated nginx-proxy (1.20.0 -> 1.21.0)
4 lat temu
BG
763952395b
Adding mjolnir antispam synapse modul.
4 lat temu
Michael-GMH
6f40d78353
fix random edits to upstream
4 lat temu
Slavi Pantaleev
36910348cf
Switch synapse-admin to tagged release (0.8.1)
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1084
4 lat temu
Michael-GMH
85777e8f96
merge with upstream
4 lat temu
Ahmad Haghighi
209d59070e
Avoiding if(s), fix #1083
Conversation: https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1083#discussion_r638671860
Signed-off-by: Ahmad Haghighi <haghighi@fedoraproject.org>
4 lat temu
Ahmad Haghighi
ee088d5d46
Synapse LDAP auth: add support for Active Directory
Signed-off-by: Ahmad Haghighi <haghighi@fedoraproject.org>
4 lat temu
Slavi Pantaleev
1ed0857019
Fix syntax error
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1024
4 lat temu
sakkiii
4a4a7f136e
changes added to hydrogen client
4 lat temu
sakkiii
3436f9c10a
rename to matrix_nginx_proxy_hsts_preload_enabled
4 lat temu
Slavi Pantaleev
0648b1b618
Upgrade Element (1.7.28 -> 1.7.29)
4 lat temu
sakkiii
7cc5328ede
Comments & Ref
4 lat temu
sakkiii
df2d91970d
matrix_nginx_proxy_xss_protection
4 lat temu
ewang
409cd2b9a3
Source port binding from group vars in line other components
4 lat temu
Eagle-251
ef6a7e051c
Fix missing port binding.
4 lat temu
ewang
1bb6ed97ae
Make port bindings default for those disabling nginx proxy
I changed the conditional statement in prosody systemd template to bind the localhost port by default if people have set ```matrix_nginx_proxy_enabled == false ```.
Hopefully that should make it the default behaviour now.
4 lat temu
Aaron Raimist
3c0452ff5a
Remove unnecessary bind for config.json, use proper nginx.conf
4 lat temu
ewang
4a772e50f4
Allow Jitsi XMPP webscoket support for users using own webserver.
Added:
- Conditional localhost Port bindings for Jitsi Prosody systemd template
- Added variable to main.yml to allow overriding from vars.yml
4 lat temu
Slavi Pantaleev
6f80292745
Add OCSP stapling support and other SSL optimizations to Hydrogen vhost
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1061
and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
4 lat temu
Slavi Pantaleev
d0de21ab34
Delete Hydrogen nginx configuration file when disabled
4 lat temu
Aaron Raimist
ac4ede20af
Add docs
4 lat temu
Aaron Raimist
1633f61018
Only install config.json when self building
4 lat temu
Aaron Raimist
9437f78c9e
Build using custom config.json, add CSP, update to 0.1.53
4 lat temu
Slavi Pantaleev
47b4608b96
Fail in a friendlier way when trying to self-build on Ansible <= 2.8
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1070
Related discussion here: 1ab507349c (commitcomment-51108407)
4 lat temu
Slavi Pantaleev
1ab507349c
Fix self-building for various components on Ansible < 2.8
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1070
4 lat temu
Tobias K
3dcbed6353
roles/matrix-grafana: Set root_url in granafa.ini
4 lat temu
sakkiii
8529ca4c17
Update grafana (7.5.6->7.5.7)
4 lat temu
Toni Spets
544915ff76
Add Heisenbridge
4 lat temu
Slavi Pantaleev
21eb39f986
Mention matrix_common_after_systemd_service_start_wait_for_timeout_seconds in failure message
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1062
4 lat temu
Slavi Pantaleev
ee46fabdca
Make waiting time for --tags=start configurable
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1062
4 lat temu
sakkiii
e9b878b9e9
Optimize SSL session
4 lat temu
Slavi Pantaleev
e6afa05f7b
Enable OCSP stapling for the federation port
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
Not sure if this is beneficial though.
4 lat temu
Slavi Pantaleev
57a6a98a50
Fix incorrect SSL certificate path
Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057
4 lat temu
sakkiii
d31b55b2a7
SSL-enabled block only
4 lat temu
rakshazi
400371f6dd
Updated Element version (1.7.27 -> 1.7.28)
4 lat temu
Slavi Pantaleev
d156c8caa2
Upgrade Synapse (1.33.2 -> 1.34.0)
4 lat temu
Slavi Pantaleev
e4dd933cf0
Make missing /_synapse/admin correctly return 404 responses
Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1058
We may try to capture such calls and return a friendlier response (HTML
or JSON) saying "The Synapse Admin API is not enabled", but that may not
be desirable.
For now, we stick to what "upstream" recommends: "simply
don't proxy these APIs", which should lead to the same kind of 404 that
we have now.
See here: 6660912226/docs/reverse_proxy.md (synapse-administration-endpoints)
4 lat temu
sakkiii
2c3da6599b
Added warning
4 lat temu
sakkiii
0dd4459799
matrix_nginx_proxy_ocsp_stapling_enabled variable added
4 lat temu
sakkiii
c05021640d
Enable OCSP Stapling
4 lat temu
Aaron Raimist
ca361af616
Add Hydrogen
4 lat temu
sakkiii
4bd7d8b5e4
Update grafana (7.5.5->7.5.6)
4 lat temu